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P\J \ Abstract 

A new watermarking algorithm is given, it is based on the so-called chaotic iterations and on the 
' choice of some coefficients which are deduced from the description of the carrier medium. After defining 

, these coefficients, chaotic discrete iterations are used to encrypt the watermark and to embed it in the 

' carrier medium. This procedure generates a topological chaos and ensures that the required properties 

O . of a watermarking algorithm are satisfied. 
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I. Introduction 



Information hiding has recently become a major information security technology, especially with the in- 
creasing importance and widespread distribution of digital media through internet. Its aim is to embed a 
00 \ piece of information into digital documents, like pictures or movies, for a large panel of reasons, such as 

O ' copyright protection, control utilization, data description, content authentication, and data integrity. Digital 

watermarking is one the techniques used in information hiding. It must offer a lot of desirable characteristics, 
^ , including security, imperceptibility and robustness. To do so, many different watermarking schemes have 

' been proposed in recent years, which can be classified into two categories: spatial domain, and frequency 

domain watermarking. In spatial domain watermarking, a laige number of bits can be embedded without 
incurring noticeable visual aitifacts; whereas, frequency domain watermarking has been shown to be quite 
robust against JPEG compression, filtering, noise pollution and so on. More recently, chaotic methods have 
been proposed to encrypt the watermark before embedding it in carrier image, for security reasons. This 
methods are usually based on three fundamental chaotic maps: Chebychev, logistic and Arnold's cat maps. 

I In this paper, a new watermarking algorithm is given, it is based on the so-called chaotic iterations 
and on the choice of some coefficients which are deduced from the description of the carrier medium. After 
defining these coefficients, chaotic discrete iterations are used to encrypt the watermark and to embed it in 
the carrier medium. 

The new algorithm consists in two stages, an encryption stage which encompasses many encryption 
algorithms and makes them more secure and an embedding stage, also based on chaotic iterations. An 
authentication of the relevant information carried by the support, can be done during each of this two stages. 
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The algorithm generates a topological chaos in the sense of Devaney and ensures by this way that the 
required properties of a watermarking algorithm are satisfied. 

After introducing the new algorithm and explaining its theoretical foundations, a case study allows us to 
evaluated it. 

The rest of this paper is organized as follows: first, some basic definitions concerning chaotic iterations 
are recalled. Then, the new chaos-based watermarking algorithm is introduced. The next section is devoted 
to the related works and to the contribution of our results in light of existing ones. Section 5 is devoted to the 
evaluation of our algorithm. A case study is presented and some classical attacks are executed, the results 
are presented and commented. The paper ends by a conclusion section where the contributions of the paper 
are summarized and the planned future work are given. 



II. Chaotic iterations: basic recalls 

In the sequel [|l;A^j] means {1, 2, . . . , A^}, denotes the n*^ term of a sequence s = (s^,s^,...), Vi 
denotes the i*^ component of a vector V = {Vi, V2, ...), and /'^ denotes the k^^ composition of a function 

k times 

Let us consider a system of a finite number N of cells so that each cell has a boolean state. Then a 
sequence of length N of boolean states of the cells corresponds to a particular state of the system. 

Definition 1 A chaotic strategy corresponds to a sequence of [|1; N|]. The set of all chaotic strategies is 
denoted by S. 

Definition 2 B denoting {0, 1}, let / : B'^ — B'^ be an iteration function and 5 € 5 be a chaotic strategy. 
The so called chaotic iterations are defined by (see iH) 



r G B^ 

if5"y^i (1) 
i. 



( t""^ if S*" 



In other words, at the n*'^ iteration, only the S""— th cell is "iterated". Note that in a more general formulation, 
f{x^)s" can be replaced by f{x^)s"-, where k ^ n, modehzing for example delays between cells (see e.g. 

m). 

Chaotic iterations generate a set of vectors (boolean vector in this paper), they are defined by an initial 
state x^, an iteration function / and a chaotic strategy S. 

III. A new chaos-based watermarking algorithm 

1 Most and least significant coefficients 

Let us first introduce the definition of most and least significant coefficient of an image. 

Definition 3 For a given image, most significant coefficients (in short MSCs), are coefficients that allow the 
description of the relevant part of the medium, i.e. its most rich part (in terms of embedding informations), 
through a sequence of bits. 
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For example, in a spatial description of a grayscale image, a definition of MSCs can be the sequence 
constituted by the thi^ee first bits of each pixel. In a frequency discrete cosine domain description, each 8x8 
block of the carrier image is mapped to a list of 64 coefficients; the energy of the image is contained in the 
firsts of them, so the first fourth coefficients of all the blocks can be a good sequence of MSCs, after binary 
conversion. 

Definition 4 By least significant coefficients (LSCs), we mean a translation of some unsignificant parts of 
a medium in a sequence of bits (unsignificant can be understand as: "which can be altered without sensitive 
damages"). 

This LSCs can be, for example, the last three bits of the gray level of each pixel, in case of spatial domain 
watermarking. 




Fig la. MSCs of Lena Fig lb. LSCs of Lena, 

pixel value increased by a factor 10 

Discrete cosine, Fourier and wavelet transform can be used to generate LSCs and MSCs, in case of 
frequency domain watermarking, but other choices are possible. 

LSCs are used during the stage of embedding: some of the least significant coefficients of the earner 
image will be chaotically chosen, and replaced by the bits of the (possibly encrypted) watermark. With a tall 
number of LSCs, the watermark can be inserted more than one time, and thus the embedding will be more 
secure and robust, but more detectable. 

MSCs are only useful in case of authentication: thus, encryption and embedding will depend on them. 
As a consequence, a coefficient should not be defined, at the same time, as a MSC and a LSC: the latter can 
be altered, while the former are needed to extract the watermark (in case of authentication). 

2 Stages of the algorithm 

Our watermarking scheme consists in two stages: encryption of the watermark and its embedding. 

2.1 Watermark encryption 

For security reasons, the watermark can be encrypted before its embedding into the image. A common way 
to achieve this stage is to use the bitwise exclusive or (XOR), for example between the watermark and a 
logistic map^ In this document, we will introduce a new encryption scheme, based on chaotic iterations. 

'The Logistic map is defined by 

U° G]0,1[, [3.57; 4], 
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Its chaotic strategy will be high sensitive to the MSCs, in case of an authenticated watermark. For more 
precision se d 1.2l in section lYlbelow. 

2.2 Watermark embedding 

Some LSCs will be substituted by the bits of the possibly encrypted watermark. To choose the sequence of 
LSCs to be replaced, a chaotic sequence {U^)^ of integers, lower than the number N of LSCs, is generated 
from the chaotic strategy used in the encryption stage. Thus, the — th least significant coefficient of the 
carrier image is substituted by the k*^ bit of the possibly encrypted watermark. In case of authentication, 
such a procedure conducts to a choice of the LSCs highly dependant to the MSCs. Se d 1.3l in section E] 
for more details. 

3 Extraction 

The chaotic strategy can be regenerated, even in the case of an authenticated watermarking: the MSCs have 
not been changed during the stage of embedding watermark. Thus, the few altered LSCs can be found, and 
the encrypted watermark can be rebuilt, and decrypted. 

If the watermarked image is attacked, then the MSCs will change. Consequently, in case of authentica- 
tion and due to the high sensitivity of the embedding sequence, the LSCs designed to receive the watermark 
will be completely different. Hence, the result of the decrypting stage of the extracted bits will have no 
similarity with the original watermark. 

4 The general chaos-based watermarking algorithm 

The different stages of our method can be described in a more general framework. First of all, the repre- 
sentation domain of the carrier image has to be decided (spatial, DCT, DWT, etc.) As explained above, this 
choice will affect the following MSCs and LSCs (most and least significant coefficients). Then, the question 
of the encryption of the watermark must be asked, and if an encryption is needed, then a cipher method will 
be chosen. In this paper, the watermark has been encrypted with chaotic iterations, but other methods can 
be chosen, such as making the bitwise exclusive or with some other boolean maps. 

For the next stage, we need to know whether the embedding has to be authenticated. If so, the significant 
information contained in the carrier image must be summarized in a selection of relevant MSCs: there are 
lot of possibilities, depending on the representation domain. Then, in case of authentication, the MSCs must 
be associated, on the one hand, to the encryption of the watermark, and on the other hand, to the embedding 
of the possibly encrypted watermark. 

Last, LSCs must be defined, to receive the watermark, and the embedding method must be chosen in 
order to alter a few LSCs with the watermark: each of this stages can be achieved in a lot of different ways. 

Let us summarize, in a scheme, the above watermarking method. 

To obtain a bit sequence X, the following proceeding can be applied: if U'' < 0.5, then X'' — 0, else — 1. 
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IV. Related works and contributions 

In ||9l and lEl, a new chaotic watermarking method is presented, starting by the encryption We of a water- 
mark W, thanks to the formula: We = W ^ X, where ® denotes the bitwise exclusive or, and X is the 
bitwise logistic map. Then, for each bit b of the encrypted watermark, a pixel of the carrier image is chosen 
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to embed b, with 2-D Arnold cat map^, and the logistic map is used another time, translated as above into a 
sequence of {4, 5, 6, 7}, to choose which least significant bit (LSB) of this pixel will be replaced by b. The 
watermark extraction is just the inverse process of the embedding algorithm. 

Other schemes for the choice of the LSBs have been proposed, the goal is mostly to change the ro- 
bustness against attacks and to make the detection of the watermark more difficult. To carry out that hash 
function or digital signature were used. The paper |l6| is an example where the weakness of the embedding 
process is needed. Other embedding domains were also explored. DFT, DCT and DWT are three frequently 
used transformations. For example, in ifTOl . logistic and Arnold cat maps are used with neural networks to 
encrypt the watermark which is embedded in the wavelet domain. Other examples of such embedding, using 
DWT and chaotic map, can be found in |[3l. or in HI. 

In the above mentioned papers, chaos is frequently employed in order to ensure the strong authentication 
and secure encryption and uniform embedding of the watermark. However, the question of how and what 
chaotic properties are really necessary to achieve these goals is never elucidated. Moreover, authentication 
and encryption ai^e not always proposed. 

In this study we try to ensure these objectives using a global and comprehensive approach. It should be 
noticed that chaotic iterations, on which our method is based, can be written in the field of discrete dynamic 
systems: 

where {X, d) is a metric space (for a distance to be defined), and / is a continuous function (see ||2l). Thus, 
it becomes possible to study the topological behavior of those chaotic iterations. 

Precisely, we have proved in lH that, if the iterate function / is suitably chosen, then chaotic itera- 
tions generate a chaos in the meaning of Devaney (its definition can be found in the Appendix, or in ll5l). 
Therefore, chaotic iterations as Devaney 's topological chaos satisfy sensitive dependence to the initial con- 
dition, unpredictability, indecomposability and uniform repartition. Sensitivity to initial conditions is used 
in authentication: in this case, watermark encryption and LSCs are highly dependent to any changes of the 
canier image. Unpredictability make it impossible to determine whose LSCs have been altered. Last, the 
watermark cannot be removed, even by cropping carrier image: it is theoretically possible to make the au- 
thentication of a watermai^ked image, even by studying just a part of it (Devaney's chaos definition contain 
the so called transitivity property: the watermark can be found in any part of the carrier image). 



V. A case study 

In this section, an application example of the above chaotic watermarking method is given, and its robustness 
through attacks is studied. 

"2-D Arnold cat map is defined by 

r = X" + Y" (mod 1) 

|yn+i ^ X" + 2Y" (modi) ^' 
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1 Stages and details 
1.1 Images description 

Carrier image is the so famous Lena, wliich is a 256 grayscale image, and the watermark is the following 
64 X 64 pixels binary image: 




Fig 2. Lena {scale 0.5) Fig 3. Watermark 



The embedding domain will be the spatial domain: selected MSCs are the four most significant bits of 
each pixel, and LSCs are the three following bits (a given pixel will at most be modified of four levels of 
gray, see Fig. la, lb). 



1.2 Encryption of tlie watermark 

Let us explain how to encrypt the watermark by using chaotic iterations defined by definition |2] in section 
im The initial state of the system is constituted by the watermark, considered as a boolean vector. The 
iteration function is the vectorial logical negation^ /o, and the chaotic strategy {S'')keK will depends on 
whether an authenticated watermarking method is desired or not, as follows. 

A chaotic boolean vector is generated by a number T of iterations of a logistic map ((/i, Uq) parameters 
will constitute the private key). Then, in case of unauthenticated watermarking, the bits of the chaotic 
boolean vector are grouped six by six, to obtain a sequence of integers lower than 64, which will constitute 
the chaotic strategy. In case of authentication, the bitwise exclusive or (XOR) is made between the chaotic 
boolean vector and the MSCs, and the result is converted into a chaotic strategy by joining its bits as above. 
Thus, the encrypted watermark is the last boolean vector generated by the chaotic iterations. 
Let us give some examples of such an encryption (T = 5000 iterations, fi = 4, Xq = 0.61): 

'The vectorial logical negation is defined by 

fo: — > B'^ 

{xi,...,Xn) I — > {xT,...,x^) 
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Fig 4a. Without authentication Fig 4b. With authentication Fig 4c. Differences 

between 4a and 46: 49,27 % 



1.3 Embedding of the watermark 

To embed the watermark, the sequence (C/'^)^^]^ of altered bits taken from the LSCs must be defined. To do 
so, the strategy (5^)fegiN defined in the encryption stage is used as follows 




Fig 5a. Watermarked Lena Fig 5b. Differences between original 
(encryption, no authentication) and watermarked Lena 

PSNR = 54.78 (pixel values increased by a factor 42) 



Remark that the map 9 29 of the torus, which is a famous example of topological Devaney's chaos 
||5l, has been chosen to make (f/'^)fce]N high sensitive to the chaotic strategy. As a consequence, {U'')ke]N 
is high sensitive to the alteration of the MSCs: in case of authentication, any significant modification of the 
watermarked image will conduct to a completely different extracted watermark. 

2 Simulation results 

In what follows, as in subsection IVII 1 .21 the embedding domain is the spatial domain, logistic map with 
parameters (/i = 4, Xo = 0.61) has been used to encrypt the watermark, MSCs are the four firsts bits of 
each pixel (useful only in case of authentication), and LSCs are the three next bits. 

To prove the efficiency and the robustness of the proposed algorithm, some attacks are applied to our 
chaotic watermarked image. For each attack, a similarity percentage with the watermai^k is computed: 
this percentage is the number of equal bits between the original and the extracted watermark, shown as a 
percentage. Let us notice that a result less than or equal to 50% implies that the image has probably not been 
watermarked. 
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2.1 Geometric attacks 
Cropping attack. In this kind of attack, a watermarked image is cropped, such as: 




Fig 6. Crop by 100 x 100 pixels. 



In this case, the following results have been obtained... 



UNAUTHENTICATION 


AUTHENTICATION 




Size (pixels) 


Similarity percentage 






Size (pixels) 


Similarity percentage 






10 


99.08% 






10 


89.81% 






50 


97.31% 






50 


54.54% 






100 


92.43% 






100 


52.24% 






200 


70.75% 






200 


51.87% 





In what follows, the decrypted watermarks are shown after a crop of 50 pixels, and after a crop of 10 
pixels, in the authentication case. 




50 X 50 pixels 10 x 10 pixels 50 x 50 pixels 
Unauthentication Authentication 
Fig 7. Extracted watermark after a cropping attack. 



In case of unauthentication, the watermark still remain after a cropping attack: the desired robustness is 
reached. It can be noticed that cropping sizes and percentages are rather proportional. 

In case of authentication, even a small change of the carrier image (a crop by 10 x 10 pixels) conduct to 
a really different extracted watermark. In this case, any attempt to alter the carrier image will be signaled, 
image is well authenticated. 

Rotation attack. Let be the rotation around the center 128 x 128 of the canier image, by angle 9. So, 
the transformation r^g o rg is applied to the watermarked image, which is altered as follows 
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Fig 8. After r_25° o r25° 
In this case, the following results are obtained. 



UNAUTHENTICATION 


AUTHENTICATION 




Angle (degree) 


Similarity percentage 






Angle (degree) 


Similarity percentage 






2 


97.51% 






2 


70.01% 






5 


94.67% 






5 


59.47% 






10 


91.30% 






10 


54.51% 






25 


80.85% 






25 


50,21% 





Decryption of the extracted watermark, after a rotation by 5° : 




Fig 9a. Unauthentication Fig 9b. Authentication 

The same conclusion as above can be declaimed: this watermarking method satisfies the desired prop- 
erties. 

2.2 Other attacks 

JPEG compression. A JPEG compression is applied to the watermarked image, depending on a compres- 
sion level. Let us notice that this attack conducts to a change of the working domain (from spatial to DCT 
domain). In this case, the following results have been obtained: 



UNAUTHENTICATION 


AUTHENTICATION 




Compression level 


Similarity percentage 






Compression level 


Similarity percentage 






2 


82.95% 






2 


54.39% 






5 


65.23% 






5 


53.46% 






10 


60.22% 






10 


50.14% 






20 


53.17% 






25 


48.80% 





A very good authentication through JPEG attack is obtained. As for the unauthentication case, the 
watermark still remain after a compression level equal to 10: this is a good result for a spatial embedding. 
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Gaussian noise. Watermarked image can be attacked too by the addition of a Gaussian noise, depending 
on a standai^d deviation. In this case, the following results have been obtained: 



UNAUTHENTICATION 


AUTHENTICATION 




Standard deviation 


Similarity percentage 






Standard deviation 


Similarity percentage 






1 


74.26% 






1 


52.05% 






2 


63.33% 






2 


50.95% 






3 


57.44% 






3 


49.65% 






5 


51.26% 






5 


49.43% 





We obtain the same conclusion as above. 



VI. Discussion and future work 

In this paper, a new way to generate watermarking methods is proposed. The new procedure depends on a 
general description of the carrier medium to watermark in terms of the significance of some coefficients we 
are called MSG and LSG in definition 3. We proposed a general and comprehensive algorithm which recalls 
the different choices and possibilities that our approach offers. 

This encryption and the selection of coefficients to alter are based on chaotic iterations 121 which gen- 
erate a topological chaos in the sense of Devaney 15]. So, the properties of topological chaos are satisfied 
by our algorithm, such as sensitivity to initial conditions, uniform repartition (thanks to the transitivity) and 
unpredictability. Thus, the proposed algorithm possesses the desirable properties expected in good water- 
marking algorithms. For example, a strong authentication of the canier image is satisfied thanks to the 
sensitivity, the unpredictability property implies security, and the resistance against attacks and discretion of 
the watermark are consequences of the transitivity property. 

The algorithm has been evaluated through attacks, and all of the expected results have been experimen- 
tally obtained. Ghoices that have been made in this first study are simple: spatial domain, negation function 
for the iteration function. The aim was not to find the best watermarking method generated by our general 
algorithm, but to give a simple illustration example, to prove its feasibility. 

In future work, in order to increase authentication and resistance to attacks, other choices of the iteration 
function and the chaotic strategy will be studied and compared. In addition, frequency domain representa- 
tions will be used to select the MSGs and LSGs. Moreover others properties ensured by chaotic iterations, 
such as entropy, will be shown and their role in watermarking algorithms will be explained.. 
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Appendix: Devaney 's chaotic dynamic systems 

Consider a metric space (Af , d), and a continuous function / : X — > X. 

Definition 5 / is said to be topologically transitive if, for any pair of open sets U,V C X, there exists 
k>0 such that f^{U) nV ^ 0. 

Definition 6 An element (a point) x is a periodic element (point) for / of period n € IN, if /"(x) = x. The 
set of periodic points of / is denoted Per{f). 

Definition 7 (Af , /) is said to be regular if the set of periodic points is dense in X, 

Vx e X,ye > 0,3p e Per{f),d{x,p) ^ e. 

Definition 8 / has sensitive dependence on initial conditions if there exists 6 > such that, for any x £ X 
and any neighborhood V of x, there exists y £ V and n ^ such that — f"'{y)\ > S. 

5 is called the constant of sensitivity of /. 

Let us recall the definition of a chaotic topological system, in sense of Devaney Q : 
Definition 9 f : X — > X is said to be chaotic on X if, and only if 

1 . / has sensitive dependence on initial conditions, 

2. / is topologically transitive, 

3. {X, f) is regular. 
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